Static task
static1
Behavioral task
behavioral1
Sample
e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1.exe
Resource
win10v2004-20240709-en
General
-
Target
e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1
-
Size
1.3MB
-
MD5
649cc95e02429e12d590ad1b2dccd8eb
-
SHA1
62d99ccce92e84c9acfeda0c3d7347f29b9fb3e2
-
SHA256
e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1
-
SHA512
077d2e0972455dc18944aae803de2f41918917f0fe2a1cdfe932ec7011419aa9745dcaf44d21f532ae04b1befae783ad0146b17961c3f21e4ddaf7245aea9f47
-
SSDEEP
24576:U0oke8wfTBmnBaMcVbWwG45cwerQJ/UZHl055hKVv8rdhVtITMg5/E5II:RoXdAaMYWT45cwAq/+c5hCvaFykII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1
Files
-
e5867428a05a634f27816275a9f0464b69f5d5371b37f8008f8b59edcd763fd1.exe windows:5 windows x86 arch:x86
a9ac0d2510c24e399676f9833f4b5ab0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAWaitForMultipleEvents
crypt32
CertFreeCertificateChain
kernel32
ExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
TranslateMessage
advapi32
CryptGetHashParam
shell32
SHGetFolderPathW
ntdll
NtResumeThread
bcrypt
BCryptGenRandom
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be0 Size: 454KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be1 Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ